A cybercriminal group called ShinyHunters executed one of the largest data breaches in history, stealing over 1.5 billion Salesforce records from 760 companies including Google, Cloudflare, and Palo Alto Networks. The attackers used compromised OAuth tokens obtained from Salesloft's GitHub...
Despite claiming retirement, the notorious Scattered Spider cybercrime group continues operating with a new focus on financial institutions. ReliaQuest researchers discovered increased attacks on banking organizations, including a sophisticated breach of a major U.S. bank using social engi...
SonicWall disclosed a security breach affecting their MySonicWall customer accounts, where attackers used brute-force attacks to access firewall configuration backup files through the cloud backup API service. The incident exposed encrypted passwords and sensitive network data from fewer t...
Microsoft and Cloudflare successfully dismantled RaccoonO365, a sophisticated Phishing-as-a-Service operation that compromised over 5,000 Microsoft 365 credentials across 94 countries since July 2024. The cybercrime platform, led by Nigerian programmer Joshua Ogundipe, generated at least $...
Critical vulnerabilities dubbed "Chaotic Deputy" have been discovered in Chaos Mesh, a popular Kubernetes chaos engineering platform, that could enable complete cluster takeover. The flaws include an unauthenticated GraphQL server (CVE-2025-59358) and three command injection vulnerabilitie...
